We claim: 

1 1 . A system for providing improved audio compression, comprising: 

2 a security core which provides security functions; 

3 one or more components, comprising at least an audio recording component and one or 

4 more transformation components; 

5 means for operating the security core; 

6 means for securely operably connecting the components to the security core, such that the 

7 security core can vouch for authenticity of each securely operably connected component; 

^ means for recording an audio stream by the securely operably connected audio recording 

§ component; 

10 means for transforming the audio stream to a text stream by at least one of the securely 

ft operably connected transformation components; and 

means for securely providing, for the text stream by the security core, an identification of 

p the securely operably connected audio recording component and each of the at least one securely 

CI operably connected transformation components. 



1 2. The system according to Claim 1, wherein selected ones of the operable connections are 

2 made using one or more buses of the security core. 

1 3. The system according to Claim 1, wherein selected ones of the operable connections are 

2 made using a wireless connection between respective ones of the components and the security 

3 core. 
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1 4. The system according to Claim 3, wherein the wireless connections use Secure Sockets 

2 Layer (SSL) data encryption or an equivalent which provides mutual authentication of both 

3 endpoints, negotiation of a time-limited key agreement with secure passage of a selected 

4 encryption key, and periodic renegotiation of the time-limited key agreement with a new 

5 encryption key. 

1 5. The system according to Claim 1, wherein selected ones of the secure operable 
2, connections are provided when the security core is manufactured. 

;j£ 6. The system according to Claim 1, wherein the means for securely operably connecting 

f% farther comprises means for authenticating the operably connected component to the security 

^3 core. 

□ 7. The system according to Claim 6, wherein the means for authenticating further comprises: 

2 means for providing a unique identifier of the operably connected component to the 

3 security core, along with a digital signature of the unique identifier that is created using a private 

4 key of the operably connected component; and 

5 means for using, by the security core, a public key that is cryptographically associated with 

6 the private key to determine authenticity of the operably connected component. 
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1 8. The system according to Claim 1 , wherein the means for securely operably connecting is 

2 activated by a hardware reset of the component, and wherein the hardware reset is activated by 

3 operably connecting of the component. 

1 9. The system according to Claim 6, wherein the means for authenticating are securely stored 

2 on the operably connected component. 

1 10. The system according to Claim 6, further comprising means for authenticating the security 

f 2 core to the operably connected component. 

!|| 11. The system according to Claim 1, further comprising: 

T% means for detecting whether the audio recording component and the at least one 

!| transformation component remain operably connected to the security core during operation of the 

i = # means for recording and the means for transforming; and 

ifl means for aborting the recording or the transforming if one or more of the audio recording 

6 component and the at least one transformation component fails to remain operably connected to 

7 the security core during operation of the means for recording and the means for transforming. 

1 12. The system according to Claim 1, further comprising: 

2 means for detecting whether the audio recording component and the at least one 

3 transformation component remain operably connected to the security core during operation of the 

4 means for recording and the means for transforming; and 
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5 means for marking the text stream as not authenticated if one or more of the audio 

6 recording component and the at least one transformation component fails to remain operably 

7 connected to the security core during operation of the means for recording and the means for 

8 transforming. 

1 13. The system according to Claim 7, further comprising: 

2 means for determining whether the audio recording component and the at least one 

3 transformation component have been authenticated to the security core; and 

4 means for aborting the recording or the transforming if one or more of the audio recording 
I component and the at least one transformation component has not been authenticated to the 

IB security core. 

;;4 14. The system according to Claim 7, further comprising: 

5 means for determining whether the audio recording component and the at least one 
3 transformation component have been authenticated to the security core; and 

4 means for marking the text stream as not authenticated if one or more of the audio 

5 recording component and the at least one transformation component has not been authenticated 

6 to the security core. 

1 15. The system according to Claim 1 , wherein the means for securely providing further 

2 comprises means for digitally notarizing, by the security core, the text stream. 
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1 16. The system according to Claim 1, wherein the means for securely providing further 

2 comprises means for providing an additional data stream that is associated with the text stream, 

3 wherein the additional data stream comprises a digital notarization, created by the security core, 

4 of the text stream. 

1 1 7. The system according to Claim 1 5, wherein the means for digitally notarizing further 

2 comprises: 

3 means for computing, by the security core, a hash value over the text stream; 

4 means for combining the hash value with a unique identifier of the audio recording 
3 component and of each of the at least one transformation components, thereby creating a 
\fi> combination data block; 

nj means for hashing the combination data block; 

lg means for digitally signing the hashed combination data block with a private cryptographic 

jjl) key of the security core, wherein the private cryptographic key has a public cryptographic key 

|ip cryptographically associated therewith; and 

1 1 means for providing the digitally signed hashed combination data block, along with the 

12 combination data block, as the digital notarization for the text stream, wherein the digital 

13 notarization cryptographically seals contents of the text stream and identifies the audio recording 

14 component and each of the at least one transformation components. 



1 



2 



18. The system according to Claim 17, further comprising means for verifying authenticity of 
the text stream by a receiver of the text stream and the digital notarization, using the public 
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cryptographic key of the security core, and for concluding that the text stream is authentic if the 
verification succeeds. 



1 19. The system according to Claim 1 8, wherein the means for verifying authenticity further 

2 comprises concluding that the text stream has not been tampered with if the verification succeeds. 

1 20. The system according to Claim 1 8, wherein the means for verifying authenticity further 

2 comprises means for determiiiing the audio recording component and the at least one 

4 transformation component involved in creating the text stream by decoding the digitally signed 

*'3 hashed combination data block to reveal the unique identifiers thereof. 

21. The system according to Claim 1 5, wherein: 

yi the means for transforming the audio stream to a text stream further comprises: 

jj means for transforming the audio stream to a digital stream by a first of the at least 

13 one transformation components which is an analog-to-digital transformation component; and 

5 means for converting the digital stream to the text stream by a second of the at 

6 least one transformation components which is a voice recognition transformation component; and 

7 the means for digitally notarizing the text stream further comprises: 

8 means for computing a hash over the text stream; 

9 means for combining the hash with unique identifiers of the audio recording 

1 0 component, the analog-to-digital transformation component, and the voice recognition 

1 1 transformation component; and 
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12 means for digitally signing the combination using a private cryptographic key of 

13 the security core, wherein the private cryptographic key has a public cryptographic key 

14 cryptographically associated therewith. 

1 22. The system according to Claim 15, wherein: 

2 the means for transforming the audio stream to a text stream further comprises: 

3 means for transforming the audio stream to a first digital stream by a first of the at 

4 least one transformation components which is an analog-to-digital transformation component; 
4 means for converting the first digital stream to a first encoded text stream by a 

I j second of the at least one transformation components which is a voice recognition transformation 

\H component, wherein the voice recognition transformation component may be augmented by zero 

H or more others of the at least one transformation components which are an authenticated speaker- 

:!£ specific voice recognition database and/or a lexical transformation component; and 
|f> means for compressing the first encoded text stream into the text stream using a 

|I third of the at least one transformation components which is a text compression transformation 

12 component; and 

1 3 the means for digitally notarizing the text stream further comprises: 

14 means for computing a hash over the text stream; 

1 5 means for combining the hash with unique identifiers of: (1) the audio recording 

16 component; (2) the analog-to-digital transformation component; (3) the voice recognition 

17 transformation component; (4) the authenticated speaker-specific voice recognition database 
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18 and/or the lexical transformation component, if they augmented the voice recognition 

19 transformation component; (5) the text compression transformation component; and 

20 means for signing the combination using a private cryptographic key of the security 

21 core, wherein the private cryptographic key has a public cryptographic key cryptographically 

22 associated therewith. 

I 23 . The system according to Claim 1 , wherein the text stream is an ASCII text stream. 

4 24. The system according to Claim 1, wherein the text stream is an EBCDIC text stream. 

ijfe 25. A method of providing improved audio compression, comprising steps of 
!! operating a security core which provides security functions; 

!L3 providing one or more components, comprising at least an audio recording component and 

]t one or more transformation components; 

r§ securely operably connecting the components to the security core, such that the security 

6 core can vouch for authenticity of each securely operably connected component; 

7 recording an audio stream by the securely operably connected audio recording component; 

8 transforming the audio stream to a text stream by at least one of the securely operably 

9 connected transformation components; and 

10 securely providing, for the text stream by the security core, an identification of the 

I I securely operably connected audio recording component and each of the at least one securely 
1 2 operably connected transformation components. 
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26. The method according to Claim 25, wherein selected ones of the operable connections are 
made using one or more buses of the security core. 

27. The method according to Claim 25, wherein selected ones of the operable connections are 
made using a wireless connection between respective ones of the components and the security 
core. 

28. The method according to Claim 27, wherein the wireless connections use Secure Sockets 
Layer (SSL) data encryption or an equivalent which provides mutual authentication of both 
endpoints, negotiation of a time-limited key agreement with secure passage of a selected 
encryption key, and periodic renegotiation of the time-limited key agreement with a new 
encryption key. 

29. The method according to Claim 25, wherein selected ones of the secure operable 
connections are provided when the security core is manufactured. 

30. The method according to Claim 25, wherein the step of securely operably connecting 
further comprises the step of authenticating the operably connected component to the security 
core. 



RSW920010010US1 



-59- 



31. The method according to Claim 30, wherein the authenticating step further comprises 
steps of: 

providing a unique identifier of the operably connected component to the security core, 
along with a digital signature of the unique identifier that is created using a private key of the 
operably connected component; and 

using, by the security core, a public key that is cryptographically associated with the 
private key to determine authenticity of the operably connected component. 

32. The method according to Claim 25, wherein the step of securely operably connecting is 
activated by a hardware reset of the component, and wherein the hardware reset is activated by 
operably connecting of the component. 

33. The method according to Claim 30, wherein instructions for performing the authenticating 
step are securely stored on the operably connected component. 

34. The method according to Claim 30, further comprising the step of authenticating the 
security core to the operably connected component. 

35. The method according to Claim 25, further comprising steps of: 

detecting whether the audio recording component and the at least one transformation 
component remain operably connected to the security core during operation of the recording step 
and the transforming step; and 
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aborting the recording or the transforming if one or more of the audio recording 
component and the at least one transformation component fails to remain operably connected to 
the security core during operation of the recording step and the transforming step. 

36. The method according to Claim 25, further comprising steps of: 

detecting whether the audio recording component and the at least one transformation 
component remain operably connected to the security core during operation of the recording step 
and the transforming step; and 

marking the text stream as not authenticated if one or more of the audio recording 
component and the at least one transformation component fails to remain operably connected to 
the security core during operation of the recording step and the transforming step. 

37. The method according to Claim 31, further comprising steps of: 

determining whether the audio recording component and the at least one transformation 
component have been authenticated to the security core; and 

aborting the recording or the transforming if one or more of the audio recording 
component and the at least one transformation component has not been authenticated to the 
security core. 

38. The method according to Claim 3 1, further comprising steps of: 

determining whether the audio recording component and the at least one transformation 
component have been authenticated to the security core; and 
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4 marking the text stream as not authenticated if one or more of the audio recording 

5 component and the at least one transformation component has not been authenticated to the 

6 security core. 

1 39. The method according to Claim 25, wherein the step of securely providing further 

2 comprises the step of digitally notarizing, by the security core, the text stream. 

1 40. The method according to Claim 25, wherein the step of securely providing further 

4 comprises the step of providing an additional data stream that is associated with the text stream, 

■5 wherein the additional data stream comprises a digital notarization, created by the security core, 

04 of the text stream. 

:L1 41. The method according to Claim 39, wherein the digitally notarizing step further comprises 

12 steps of 

r | computing, by the security core, a hash value over the text stream; 

4 combining the hash value with a unique identifier of the audio recording component and of 

5 each of the at least one transformation components, thereby creating a combination data block; 

6 hashing the combination data block; 

7 digitally signing the hashed combination data block with a private cryptographic key of the 

8 security core, wherein the private cryptographic key has a public cryptographic key 

9 cryptographically associated therewith; and 
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providing the digitally signed hashed combination data block, along with the combination 
data block, as the digital notarization for the text stream, wherein the digital notarization 
cryptographically seals contents of the text stream and identifies the audio recording component 
and each of the at least one transformation components. 

42. The method according to Claim 41, further comprising the step of verifying authenticity of 
the text stream by a receiver of the text stream and the digital notarization, using the public 
cryptographic key of the security core, and concluding that the text stream is authentic if the 
verification succeeds. 

43. The method according to Claim 42, wherein the step of verifying authenticity further 
comprises concluding that the text stream has not been tampered with if the verification succeeds. 

44. The method according to Claim 42, wherein the step of verifying authenticity further 
comprises the step of determining the audio recording component and the at least one 
transformation component involved in creating the text stream by decoding the digitally signed 
hashed combination data block to reveal the unique identifiers thereof 

45. The method according to Claim 39, wherein; 

the step of transforming the audio stream to a text stream further comprises steps of: 
transforming the audio stream to a digital stream by a first of the at least one 
transformation components which is an analog-to-digital transformation component; and 
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5 converting the digital stream to the text stream by a second of the at least one 

6 transformation components which is a voice recognition transformation component; and 

7 the step of digitally notarizing the text stream further comprises steps of: 

8 computing a hash over the text stream; 

9 combining the hash with unique identifiers of the audio recording component, the 

10 analog-to-digital transformation component, and the voice recognition transformation component; 

11 and 

12 digitally signing the combination using a private cryptographic key of the security 

13 core, wherein the private cryptographic key has a public cryptographic key cryptographically 
M associated therewith. 

ul 46, The method according to Claim 39, wherein: 

l -2 the step of transforming the audio stream to a text stream further comprises steps of: 

f I transforming the audio stream to a first digital stream by a first of the at least one 

r 4 transformation components which is an analog-to-digital transformation component; 

5 converting the first digital stream to a first encoded text stream by a second of the 

6 at least one transformation components which is a voice recognition transformation component, 

7 wherein the voice recognition transformation component may be augmented by zero or more 

8 others of the at least one transformation components which are an authenticated speaker-specific 

9 voice recognition database and/or a lexical transformation component; and 
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10 compressing the first encoded text stream into the text stream using a third of the 

1 1 at least one transformation components which is a text compression transformation component; 

12 and 

1 3 the step of digitally notarizing the text stream further comprises steps of; 

14 computing a hash over the text stream; 

1 5 combining the hash with unique identifiers of: (1) the audio recording component; 

1 6 (2) the analog-to-digital transformation component; (3) the voice recognition transformation 

17 component; (4) the authenticated speaker-specific voice recognition database and/or the lexical 
\& transformation component, if they augmented the voice recognition transformation component; 
IS (5) the text compression transformation component; and 

j@ signing the combination using a private cryptographic key of the security core, 

11 wherein the private cryptographic key has a public cryptographic key cryptographically associated 

22 therewith. 

Pi 47. The method according to Claim 25, wherein the text stream is an ASCII text stream. 

1 48 . The method according to Claim 25, wherein the text stream is a Unicode text stream. 

1 49. A computer program product for providing improved audio compression, the computer 

2 program product embodied on one or more computer-readable media and comprising: 

3 computer-readable program code means for operating a security core which provides 

4 security functions; 
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5 computer-readable program code means for securely operably connecting one or more 

6 components, comprising at least an audio recording component and one or more transformation 

7 components, to the security core, such that the security core can vouch for authenticity of each 

8 securely operably connected component; 

9 computer-readable program code means for transforming an audio stream that is recorded 

10 by the securely operably connected audio recording component to a text stream, the transforming 

1 1 being performed by at least one of the securely operably connected transformation components; 

12 and 

13 computer-readable program code means for securely providing, for the text stream by the 
iM security core, an identification of the securely operably connected audio recording component and 
1@ each of the at least one securely operably connected transformation components. 

11 50, The computer program product according to Claim 49, wherein selected ones of the 

'L..L 

1 2 operable connections are made using one or more buses of the security core. 

1 51. The computer program product according to Claim 49, wherein selected ones of the 

2 operable connections are made using a wireless connection between respective ones of the 

3 components and the security core. 

1 52. The computer program product according to Claim 51, wherein the wireless connections 

2 use Secure Sockets Layer (SSL) data encryption or an equivalent which provides mutual 

3 authentication of both endpoints, negotiation of a time-limited key agreement with secure passage 
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of a selected encryption key, and periodic renegotiation of the time-limited key agreement with a 
new encryption key. 

53. The computer program product according to Claim 49, wherein selected ones of the 
secure operable connections are provided when the security core is manufactured. 

54. The computer program product according to Claim 49, wherein the computer-readable 
program code means for securely operably connecting further comprises computer-readable 
program code means for authenticating the operably connected component to the security core. 

55. The computer program product according to Claim 54, wherein the computer-readable 
program code means for authenticating further comprises: 

computer-readable program code means for providing a unique identifier of the operably 
connected component to the security core, along with a digital signature of the unique identifier 
that is created using a private key of the operably connected component; and 

computer-readable program code means for using, by the security core, a public key that 
cryptographically associated with the private key to determine authenticity of the operably 
connected component. 

56. The computer program product according to Claim 49, wherein the computer-readable 
program code means for securely operably connecting is activated by a hardware reset of the 
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component, and wherein the hardware reset is activated by operably connecting of the 
component. 

57. The computer program product according to Claim 54, wherein the computer-readable 
program code means for authenticating are securely stored on the operably connected component. 

58. The computer program product according to Claim 54, further comprising computer- 
readable program code means for authenticating the security core to the operably connected 
component. 

59. The computer program product according to Claim 49, further comprising: 
computer-readable program code means for detecting whether the audio recording 

component and the at least one transformation component remain operably connected to the 
security core during operation of the recording and the computer-readable program code means 
for transforming; and 

computer-readable program code means for aborting the recording or the transforming if 
one or more of the audio recording component and the at least one transformation component 
fails to remain operably connected to the security core during operation of the recording and the 
computer-readable program code means for transforming. 

60. The computer program product according to Claim 49, further comprising: 
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2 computer-readable program code means for detecting whether the audio recording 

3 component and the at least one transformation component remain operably connected to the 

4 security core during operation of the recording and the computer-readable program code means 

5 for transforming; and 

6 computer-readable program code means for marking the text stream as not authenticated 

7 if one or more of the audio recording component and the at least one transformation component 

8 fails to remain operably connected to the security core during operation of the recording and the 

9 computer-readable program code means for transforming. 

H 61 . The computer program product according to Claim 55, further comprising: 

j % computer-readable program code means for determining whether the audio recording 

fi3 component and the at least one transformation component have been authenticated to the security 

= 4 core; and 

; i computer-readable program code means for aborting the recording or the transforming if 

r| one or more of the audio recording component and the at least one transformation component has 

7 not been authenticated to the security core. 

1 62. The computer program product according to Claim 55, further comprising: 

2 computer-readable program code means for determining whether the audio recording 

3 component and the at least one transformation component have been authenticated to the security 

4 core; and 
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computer-readable program code means for marking the text stream as not authenticated 
if one or more of the audio recording component and the at least one transformation component 
has not been authenticated to the security core. 

63. The computer program product according to Claim 49, wherein the computer-readable 
program code means for securely providing further comprises computer-readable program code 
means for digitally notarizing, by the security core, the text stream. 

64. The computer program product according to Claim 49, wherein the computer-readable 
program code means for securely providing further comprises computer-readable program code 
means for providing an additional data stream that is associated with the text stream, wherein the 
additional data stream comprises a digital notarization, created by the security core, of the text 
stream. 

65. The computer program product according to Claim 63, wherein the computer-readable 
program code means for digitally notarizing further comprises: 

computer-readable program code means for computing, by the security core, a hash value 
over the text stream; 

computer-readable program code means for combining the hash value with a unique 
identifier of the audio recording component and of each of the at least one transformation 
components, thereby creating a combination data block; 

computer-readable program code means for hashing the combination data block; 
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9 computer-readable program code means for digitally signing the hashed combination data 

10 block with a private cryptographic key of the security core, wherein the private cryptographic key 

11 has a public cryptographic key cryptographically associated therewith; and 

12 computer-readable program code means for providing the digitally signed hashed 

13 combination data block, along with the combination data block, as the digital notarization for the 

14 text stream, wherein the digital notarization cryptographically seals contents of the text stream 

15 and identifies the audio recording component and each of the at least one transformation 

16 components. 

ijj 66. The computer program product according to Claim 65, further comprising computer- 

j|2 readable program code means for verifying authenticity of the text stream by a receiver of the text 

m stream and the digital notarization, using the public cryptographic key of the security core, and for 

14 concluding that the text stream is authentic if the verification succeeds. 

rt 67. The computer program product according to Claim 66, wherein the computer-readable 

2 program code means for verifying authenticity further comprises concluding that the text stream 

3 has not been tampered with if the verification succeeds. 

1 68. The computer program product according to Claim 66, wherein the computer-readable 

2 program code means for verifying authenticity further comprises computer-readable program 

3 code means for determining the audio recording component and the at least one transformation 
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4 component involved in creating the text stream by decoding the digitally signed hashed 

5 combination data block to reveal the unique identifiers thereof, 

1 69. The computer program product according to Claim 63, wherein: 

2 the computer-readable program code means for transforming the audio stream to a text 

3 stream further comprises: 

4 computer-readable program code means for transforming the audio stream to a 

5 digital stream by a first of the at least one transformation components which is an analog-to- 

6 digital transformation component; and 

;ff computer-readable program code means for converting the digital stream to the 

fS text stream by a second of the at least one transformation components which is a voice 

W recognition transformation component; and 

10 the computer-readable program code means for digitally notarizing the text stream further 

|| comprises: 

| | computer-readable program code means for computing a hash over the text 

13 stream; 

14 computer-readable program code means for combining the hash with unique 

15 identifiers of the audio recording component, the analog-to-digital transformation component, and 

16 the voice recognition transformation component; and 

17 computer-readable program code means for digitally signing the combination using 

18 a private cryptographic key of the security core, wherein the private cryptographic key has a 

19 public cryptographic key cryptographically associated therewith. 
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1 70. The computer program product according to Claim 63, wherein: 

2 the computer-readable program code means for transforming the audio stream to a text 

3 stream further comprises: 

4 computer-readable program code means for transforming the audio stream to a 

5 first digital stream by a first of the at least one transformation components which is an analog-to- 

6 digital transformation component; 

7 computer-readable program code means for converting the first digital stream to a 
| first encoded text stream by a second of the at least one transformation components which is a 
3 voice recognition transformation component, wherein the voice recognition transformation 

Jj9 component may be augmented by zero or more others of the at least one transformation 

Pj components which are an authenticated speaker-specific voice recognition database and/or a 

12 lexical transformation component; and 

p computer-readable program code means for compressing the first encoded text 

il l stream into the text stream using a third of the at least one transformation components which is a 

15 text compression transformation component; and 

16 the computer-readable program code means for digitally notarizing the text stream further 

17 comprises: 

18 computer-readable program code means for computing a hash over the text 

19 stream; 

20 computer-readable program code means for combining the hash with unique 

21 identifiers of: (1) the audio recording component; (2) the analog-to-digital transformation 
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22 component; (3) the voice recognition transformation component; (4) the authenticated speaker- 

23 specific voice recognition database and/or the lexical transformation component, if they 

24 augmented the voice recognition transformation component; (5) the text compression 

25 transformation component; and 

26 computer-readable program code means for signing the combination using a 

27 private cryptographic key of the security core, wherein the private cryptographic key has a public 

28 cryptographic key cryptographically associated therewith. 

1 7 1 . The computer program product according to Claim 49, wherein the text stream is an 

i M ASCII text stream. 

Ill 72. The computer program product according to Claim 49, wherein the text stream is a 

- 2 Unicode text stream. 
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